On 14.10.2014 22:23, Martin Pitt wrote: > You also need root to initially get those CAP_*, so this is not a real > limitation. Yes it is. the capability is set on exe file by the installer. The exe itself should never acquire root ideally. Only has the limited subset of root powers CAP_SYS_RAWIO and CAP_SYS_MODULE